@ Onboard Sensor Data Qualification in Human-Rated 
Launch Vehicles 

Applications include sensor data qualification and equipment condition monitoring in 
commercial power plants. 
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The avionics system software for 
human-rated launch vehicles requires 
an implementation approach that is ro- 
bust to failures, especially the failure of 
sensors used to monitor vehicle condi- 
tions that might result in an abort de- 
termination. Sensor measurements pro- 
vide the basis for operational decisions 
on human-rated launch vehicles. This 
data is often used to assess the health of 
system or subsystem components, to 
identify failures, and to take corrective 
action. An incorrect conclusion and/or 
response may result if the sensor itself 
provides faulty data, or if the data pro- 
vided by the sensor has been corrupted. 
Operational decisions based on faulty 
sensor data have the potential to be cat- 
astrophic, resulting in loss of mission or 
loss of crew. To prevent these later situ- 
ations from occurring, a Modular Arch- 
itecture and Generalized Methodology 
for Sensor Data Qualification in 
Human-rated Launch Vehicles has 
been developed. 

Sensor Data Qualification (SDQ) is a 
set of algorithms that can be imple- 
mented in onboard flight software, and 
can be used to qualify data obtained 
from flight-critical sensors prior to the 
data being used by other flight software 
algorithms. Qualified data has been ana- 
lyzed by SDQ and is determined to be a 


true representation of the sensed system 
state; that is, the sensor data is deter- 
mined not to be corrupted by sensor 
faults or signal transmission faults. Sen- 
sor data can become corrupted by faults 
at any point in the signal path between 
the sensor and the flight computer. 
Qualifying the sensor data has the bene- 
fit of ensuring that erroneous data is 
identified and flagged before otherwise 
being used for operational decisions, 
thus increasing confidence in the re- 
sponse of the other flight software 
processes using the qualified data, and 
decreasing the probability of false 
alarms or missed detections. 

At a high level, SDQ is called by the 
flight computer, as required each cycle, 
to qualify a specific sensor or set of sen- 
sors. SDQ first determines the update- 
rate of the data, and obtains the speci- 
fied data from the sensor data table. 
SDQ then consults the data provided by 
the Mission Manager Function to deter- 
mine the appropriate subset of pre-de- 
fined algorithms, thresholds, and pa- 
rameters to be used in qualifying 
specified sensor data. Next, appropriate 
algorithms are applied to the data. If a 
given algorithm determines that the 
data is faulty, the associated data signal 
accrues a strike from that algorithm for 
the current flight computer cycle, and 


the algorithm or algorithms that failed 
the data are recorded. Having run all ap- 
plicable fault detection algorithms, the 
strike counters for each of the applica- 
ble algorithm/sensor pairs are then 
tested for the persistence of any failures. 
Sensors associated with data that meets 
persistence criteria are flagged as per- 
manently failed. 

Alternate embodiments of some of the 
qualification algorithms used in the Ares 
SDQ architecture have prior implemen- 
tations that were incorporated into com- 
mercial data qualification development 
and analysis tools under the SureSense 
trademark. SureSense has been used to 
develop and implement real-time data 
qualification algorithms for ground- 
based nuclear power generation systems. 

This work was done by Edmond Wong and 
Kevin J. Melcher of Glenn Research Center; 
William A. Maul, Amy K. Chicatelli, Thomas 
S. Sowers, and Christopher Fulton of QinetiQ 
North America; and Randall Bickford of Ex- 
pert Microsystems, Inc. Further information is 
contained in a TSP (see page 1 ). 

Inquiries concer ning rights for the commer- 
cial use of this invention should be addressed 
to NASA Glenn Research Center, Innovative 
Partnerships Office, Attn: Steven Fedor, 
Mail Stop 4-8, 21000 Brookpark Road, 
Cleveland, Ohio 44135. Refer to LEW- 
186 3 3-1. 


® Rugged, Portable, Real-Time Optical Gaseous Analyzer for 
Hydrogen Fluoride 

Applications include trace gas sensor applications where rapid sampling is required, particularly 
in human-occupied closed volumes. 

John H. Glenn Research Center, Cleveland, Ohio 


Hydrogen fluoride (HF) is a primary 
evolved combustion product of fluori- 
nated and perfluorinated hydrocarbons. 
HF is produced during combustion by 
the presence of impurities and hydro- 
gen-containing polymers including poly- 
imides. This effect is especially danger- 
ous in closed occupied volumes like 
spacecraft and submarines. In these sys- 


tems, combinations of perfluorinated hy- 
drocarbons and polyimides are used for 
insulating wiring. HF is both highly toxic 
and short-lived in closed environments 
due to its reactivity. The high reactivity 
also makes HF sampling problematic. 

An infrared optical sensor can detect 
promptly evolving HF with minimal sam- 
pling requirements, while providing 


both high sensitivity and high specificity. 
A rugged optical path length enhance- 
ment architecture enables both high HF 
sensitivity and rapid environmental sam- 
pling with minimal gaseous contact with 
the low-reactivity sensor surfaces. The 
inert optical sample cell, combined with 
infrared semiconductor lasers, is joined 
with an analog and digital electronic 
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control architecture that allows for 
ruggedness and compactness. The com- 
bination provides both portability and 
battery operation on a simple cam- 
corder battery for up to eight hours. 

Optical detection of gaseous HF is 
confounded by the need for rapid sam- 
pling with minimal contact between the 
sensor and the environmental sample. A 
sensor is required that must simultane- 
ously provide the required sub-parts-per- 
million detection limits, but with the 
high specificity and selectivity expected 
of optical absorption techniques. It 
should also be rugged and compact for 
compatibility with operation onboard 
spacecraft and submarines. 

A new optical cell has been developed 
for which environmental sampling is ac- 
complished by simply traversing the few- 
mm-thick cell walls into an open volume 


where die measurement is made. A small, 
low-power fan or vacuum pump may be 
used to push or pull the gaseous sample 
into the sample volume for a response 
time of a few seconds. The optical cell si- 
multaneously provides for an enhanced 
optical interaction path length between 
the environmental sample and the in- 
frared laser. Further, the optical cell itself 
is comprised of inert materials that render 
it immune to attack by F1F. In some cases, 
the sensor may be configured so that the 
optoelectronic devices themselves are pro- 
tected and isolated from HF by the optical 
cell. The optical sample cell is combined 
with custom-developed analog and digital 
control electronics that provide nigged, 
compact operation on a platform that can 
run on a camcorder battery. 

The sensor is inert with respect to 
acidic gases like HF, while providing the 


required sensitivity, selectivity, and re- 
sponse time. Certain types of combustion 
events evolve copious amounts of HF, very 
little of other gases typically associated 
with combustion (e.g., carbon monox- 
ide), and very low levels of aerosols and 
particulates (which confound traditional 
smoke detectors). The new sensor plat- 
form could warn occupants early enough 
to take the necessary countermeasures. 

This work was done by Jeffrey Pilgrim and 
Paula Gonzales of Vista Photonics, Inc. for 
Glenn Research Center. Further information is 
contained in a TSP (see page 1). 

Inquiries concerning rights for the commer- 
cial use of this invention should be addressed to 
NASA Glenn Research Center, Innovative 
Partnerships Office, Attn: Steven Fedor, Mail 
Stop 4-8, 21 000 Brookpark Road, Cleveland, 
Ohio 44135. Refer to LEW-1 8892-1. 


A Probabilistic Mass Estimation Algorithm for a Novel 7- 
Channel Capacitive Sample Verification Sensor 

NASA’s Jet Propulsion Laboratory, Pasadena, California 


A document describes an algorithm 
created to estimate the mass placed on a 
sample verification sensor (SVS) de- 
signed for lunar or planetary robotic 
sample return missions. A novel SVS 
measures the capacitance between a 
rigid bottom plate and an elastic top 
membrane in seven locations. As addi- 
tional sample material (soil and/or 
small rocks) is placed on the top mem- 
brane, the deformation of the mem- 
brane increases the capacitance. The 
mass estimation algorithm addresses 
both the calibration of each SVS chan- 
nel, and also addresses how to combine 
the capacitances read from each of the 
seven channels into a single mass esti- 


mate. The probabilistic approach com- 
bines the channels according to the vari- 
ance observed during the training 
phase, and provides not only the mass 
estimate, but also a value for the cer- 
tainty of the estimate. 

SVS capacitance data is collected for 
known masses under a wide variety of 
possible loading scenarios, though in all 
cases, the distribution of sample within 
the canister is expected to be approxi- 
mately uniform. A capacitance-vs-mass 
curve is fitted to this data, and is subse- 
quently used to determine the mass esti- 
mate for the single channel’s capaci- 
tance reading during the measurement 
phase. This results in seven different 


mass estimates, one for each SVS chan- 
nel. Moreover, the variance of the cali- 
bration data is used to place a Gaussian 
probability distribution function (pdf) 
around this mass estimate. To blend 
these seven estimates, the seven pdfs are 
combined into a single Gaussian distri- 
bution function, providing the final 
mean and variance of the estimate. This 
blending technique essentially takes the 
final estimate as an average of the esti- 
mates of the seven channels, weighted 
by the inverse of the channel’s variance. 

This work was done by Michael Wolf of 
Caltech for NASA’s Jet Propulsion Labora- 
tory. Further information is contained in a 
TSP (see page 1). NPO-48143 


© Low-Power Architecture for an Optical Life Gas Analyzer 

A simple camcorder battery can be used for as long as eight hours. 

John H. Glenn Research Center, Cleveland, Ohio 


Analog and digital electronic control 
architecture has been combined with an 
operating methodology for an optical 
trace gas sensor platform that allows very 
low power consumption while providing 
four independent gas measurements in 
essentially real time, as well as a user in- 


terface and digital data storage and out- 
put. The implemented design eliminates 
the cross-talk between the measurement 
channels while maximizing the sensitiv- 
ity, selectivity, and dynamic range for 
each measured gas. The combination 
provides for battery operation on a sim- 


ple camcorder battery for as long as 
eight hours. The custom, compact, 
rugged, self-contained design specifically 
targets applications of optical major con- 
stituent and trace gas detection for mul- 
tiple gases using multiple lasers and pho- 
todetectors in an integrated package. 
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